Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Cybermind

#36985of 53,622
7.5Total CVSS
Vulnerabilities · 1
PT-2007-2681
7.5
2007-03-03
Webmod · Webmod · CVE-2007-1260
**Name of the Vulnerable Software and Affected Versions** WebMod version 0.48 **Description** A stack-based buffer overflow issue exists in the connectHandle function in server.cpp, allowing remote attackers to execute arbitrary code via a long string in the `Content-Length` HTTP header. **Recommendations** For WebMod version 0.48, consider restricting access to the connectHandle function in server.cpp until a patch is available. As a temporary workaround, limit the length of strings accepted in the `Content-Length` HTTP header to prevent exploitation.